Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier: n27cTFZb5h63x1HaXVLMWN9d5avWl+ZqRdSZsXlglWw=
Subject key identifier: E0:E5:BC:41:DC:A3:08:4F:A8:FA:25:02:FC:18:22:CD:73:97:41:E0
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial: 019510C6E1FEA61559FAB86728838BACE35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number: 06F7
Signing time: Sun 16 Feb 2025 22:00:24 +0000
Manifest this update: Sun 16 Feb 2025 22:00:24 +0000
Manifest next update: Mon 17 Feb 2025 22:00:24 +0000
Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: OxusXLP62T2vt98b7GHGy1bfrnbVl8ry3ZM1zZXagEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:e1:fe:a6:15:59:fa:b8:67:28:83:8b:ac:e3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Validity
Not Before: Feb 16 22:00:24 2025 GMT
Not After : Feb 17 22:00:24 2025 GMT
Subject: CN=e0e5bc41dca3084fa8fa2502fc1822cd739741e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:a2:f5:3e:7c:57:30:61:72:83:ca:bf:1e:
3a:d3:be:25:93:03:91:6e:fc:76:9e:c3:a9:21:7a:
10:96:4b:e3:28:d6:8c:10:f0:24:56:6a:64:48:11:
aa:53:f5:bf:e2:89:08:5c:9e:c7:0a:4c:e2:ea:14:
ce:b8:d7:b9:3f:d7:70:d5:b6:d4:84:ba:fa:45:34:
d3:c9:c4:8e:e8:61:2c:a4:14:fd:09:15:9d:d0:5b:
77:ea:fc:37:6f:cf:70:27:19:d7:43:e2:59:a4:cb:
28:8f:b7:11:f1:67:53:c6:ce:74:be:d4:99:13:02:
bd:aa:b9:8b:b7:91:97:65:dc:90:c2:ee:ef:b6:9f:
82:a7:2d:d5:75:49:ac:7c:55:30:5d:15:34:b1:dc:
9f:f2:6a:52:14:2a:b2:cd:9e:87:10:5a:c6:04:d5:
2b:bf:27:c4:3f:6f:97:b2:0a:86:70:52:6c:c9:28:
58:ce:e3:6a:5f:2a:d5:29:be:fa:21:08:31:61:1a:
b4:91:aa:16:2f:9c:51:b4:65:d9:2c:aa:84:5e:b6:
d6:e2:04:8c:99:65:5b:bb:eb:a0:14:82:6f:ec:f9:
79:0b:0d:ad:fb:2e:0a:bd:63:d1:56:72:54:25:f5:
3e:bf:24:bd:a5:f4:f4:47:a3:a7:49:a6:a0:92:4b:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:BC:41:DC:A3:08:4F:A8:FA:25:02:FC:18:22:CD:73:97:41:E0
X509v3 Authority Key Identifier:
keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:2c:28:a4:0b:08:03:ee:d1:d1:32:08:e2:a8:d6:46:85:
39:fe:7d:31:df:5d:b1:67:3b:67:4d:04:3e:7b:4d:a7:b2:fb:
22:78:d6:ef:f2:db:81:01:13:11:3d:33:7f:b0:37:d7:04:b3:
f8:8b:92:f4:05:f9:f9:45:f5:12:85:a8:fc:f4:fb:e9:91:ab:
d2:9c:8e:9b:0f:63:f3:cb:ed:59:71:2a:7f:85:46:43:69:9e:
41:9e:2d:5d:ae:9c:b1:1e:40:74:e6:b5:da:ae:5d:2e:d7:eb:
a4:db:be:b1:4c:41:d8:17:14:cf:9e:ba:5b:dc:7c:48:c0:98:
a7:84:9a:c5:1d:8d:b2:18:5d:40:53:9a:08:78:d8:5b:c1:3c:
4a:5d:c5:9d:26:59:f7:fa:33:a5:66:40:a4:d4:6f:d9:75:c1:
10:b6:12:58:a5:33:02:f6:c6:6b:6f:5b:87:eb:47:98:98:ae:
8d:d8:44:0c:99:73:56:27:c1:d9:42:20:03:17:42:8c:b0:c9:
f1:33:ba:7f:49:b7:05:8e:92:fb:3b:06:3a:dc:15:d6:8e:9d:
1b:e1:57:a2:2b:37:1f:60:5a:a5:45:90:c6:24:6f:45:f1:60:
34:29:47:c5:e1:fc:0e:e1:26:8c:e2:42:f8:57:3d:e9:5c:d9:
99:b0:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:20 2025 by rpki-client